VulnerabilityModified

CVE-2012-5691

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.

HIGH 9.3EPSS 52.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 52.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted RealMedia file.

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 52.70% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: realnetworks/realplayer · realnetworks/realplayer sp
Source: cve@mitre.org

References

http://service.real.com/realplayer/security/12142012_player/en/Vendor Advisory
http://service.real.com/realplayer/security/12142012_player/en/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.